This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer File: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer (raw, json) Hash identifier: m6JwnI5vo+qe+ixfkyjoPooB8MWeAH9oIwNtNxj7yhg= Subject key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 316E70914F775791283723AFE8ECCC175A388639 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft caRepository: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Dec 2025 20:04:31 +0000 Certificate not after: Mon 30 Nov 2026 20:09:31 +0000 Subordinate resources: AS: 266032 IP: 170.245.248.0/22 IP: 2804:3974::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6e:70:91:4f:77:57:91:28:37:23:af:e8:ec:cc:17:5a:38:86:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 1 20:04:31 2025 GMT Not After : Nov 30 20:09:31 2026 GMT Subject: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:57:9a:35:48:c0:99:27:6c:8a:c8:f1:3a: 37:a5:38:ee:e7:2e:5b:e1:80:fa:88:f6:a5:b8:ff: 35:0a:75:d9:6d:b3:20:13:40:e5:89:aa:43:42:44: 87:02:d4:ca:80:ef:de:b8:29:2e:eb:0c:f8:2a:9b: e4:88:8d:e0:3c:ab:a0:53:c3:69:65:45:79:fd:a2: 46:70:62:d8:cf:a1:10:d0:cb:7a:27:0e:e1:d9:7d: d9:51:31:97:24:4c:8f:c2:fc:bd:4c:88:d2:10:3a: f1:36:4d:ab:6a:c2:9e:bc:44:09:f0:9c:d2:42:2c: 19:4e:3a:88:66:a0:6c:08:7a:73:0e:6c:86:44:f1: 79:4e:1d:5a:e2:74:56:1d:60:0b:55:12:04:ba:73: 78:eb:2d:f5:94:3d:a8:b9:4e:d6:33:74:38:af:d1: 7d:0d:1c:5c:10:26:20:e3:e6:b5:89:5e:6b:bb:6e: 3e:f6:cd:06:5a:6c:23:be:03:22:97:62:c9:d8:50: cb:69:19:aa:83:0c:e8:bf:f1:8e:90:a1:39:6e:69: 57:fe:2d:bc:61:e3:68:1e:6d:d8:2c:50:9e:9f:ee: c3:37:8b:c3:0a:d8:2a:b0:38:b7:38:48:63:20:b5: e7:f2:11:9b:1c:f3:c1:ea:e8:fb:1c:46:33:df:d8: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.248.0/22 IPv6: 2804:3974::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266032 Signature Algorithm: sha256WithRSAEncryption d0:4b:70:7c:70:e6:98:98:f6:b1:ab:5f:58:ab:4d:90:ab:08: 96:09:99:36:28:de:be:24:1e:ff:bf:4a:15:f3:d3:5e:60:e5: d2:68:91:13:32:73:45:74:b5:31:76:d6:ae:4c:96:58:38:51: 64:31:58:22:0f:66:75:56:6a:86:0c:98:ef:5a:a5:c0:23:30: 79:2e:8f:c8:6e:fd:78:eb:40:39:fa:ac:48:25:28:60:28:e5: 3b:2d:78:15:6c:ad:4e:7a:57:0d:b7:12:8f:60:8b:a4:5d:4b: 70:fc:18:e1:2e:85:5a:07:88:66:c2:1d:2b:cf:78:d0:49:50: 4e:d1:0b:fa:65:ff:ac:5d:fa:11:67:e4:18:75:d3:b4:f4:b8: c1:2a:ca:c1:8e:a2:92:c9:e4:bc:74:76:44:fa:8d:40:ca:d3: cf:09:f4:ea:05:8c:bc:3c:be:73:5d:b5:43:37:c2:36:b4:d8: 79:42:91:a5:82:cc:eb:da:ee:71:e1:dc:09:91:80:6b:bd:e2: 98:86:8a:ae:4e:55:29:3a:ec:9d:9c:9a:c8:97:41:f5:5b:a1: 1d:1f:ee:e9:57:c6:fe:24:11:25:87:2f:18:2c:20:11:94:34: 1b:cd:7b:4c:2d:91:6f:f5:88:49:c7:e2:bd:7f:e0:19:79:ad: 24:2a:77:6a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMW5wkU93V5EoNyOv6OzMF1o4hjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDEyMDA0MzFaFw0yNjExMzAyMDA5MzFaMDMxMTAvBgNV BAMTKENEQTA3NjY2OTlCQkI2QjUxQ0I5MzRGRDRGOEU4NkVCODFEQTZBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjA1eaNUjAmSdsisjxOjelOO7n LlvhgPqI9qW4/zUKddltsyATQOWJqkNCRIcC1MqA7964KS7rDPgqm+SIjeA8q6BT w2llRXn9okZwYtjPoRDQy3onDuHZfdlRMZckTI/C/L1MiNIQOvE2Tatqwp68RAnw nNJCLBlOOohmoGwIenMObIZE8XlOHVridFYdYAtVEgS6c3jrLfWUPai5TtYzdDiv 0X0NHFwQJiDj5rWJXmu7bj72zQZabCO+AyKXYsnYUMtpGaqDDOi/8Y6QoTluaVf+ Lbxh42gebdgsUJ6f7sM3i8MK2CqwOLc4SGMgtefyEZsc88Hq6PscRjPf2GxXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNoHZmmbu2tRy5 NP1PjobrgdpqmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVL SmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3azcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV S0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAvQ0RB MDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4MURBNkE5OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvX4MA0EAgACMAcDBQAoBDl0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPMDANBgkqhkiG9w0BAQsFAAOCAQEA0EtwfHDmmJj2satf WKtNkKsIlgmZNijeviQe/79KFfPTXmDl0miREzJzRXS1MXbWrkyWWDhRZDFYIg9m dVZqhgyY71qlwCMweS6PyG79eOtAOfqsSCUoYCjlOy14FWytTnpXDbcSj2CLpF1L cPwY4S6FWgeIZsIdK8940ElQTtEL+mX/rF36EWfkGHXTtPS4wSrKwY6iksnkvHR2 RPqNQMrTzwn06gWMvDy+c121QzfCNrTYeUKRpYLM69ruceHcCZGAa73imIaKrk5V KTrsnZyayJdB9VuhHR/u6VfG/iQRJYcvGCwgEZQ0G817TC2Rb/WIScfivX/gGXmt JCp3ag== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:14 2025 by rpki-client